| 场景 | 有多个公网地址可用 |
|---|---|
| 适用 | 华为 VRP |
| 命令族 | nat address-group + nat outbound <acl> address-group <n> |
华为 VRP
华为 VRP
nat address-group 1
mode pat
section 0 202.1.1.1 202.1.1.10
acl number 2000
rule 5 permit source 192.168.1.0 0.0.0.255
interface GigabitEthernet0/0/1
nat outbound 2000 address-group 1
display nat address-group 1思科 IOS
思科 IOS
ip nat pool POOL 202.1.1.1 202.1.1.10 netmask 255.255.255.248
ip nat inside source list 1 pool POOL overloadH3C Comware
H3C Comware
nat address-group 1 name NATPOOL
address 202.1.1.1 202.1.1.10
interface GigabitEthernet1/0/1
nat outbound 2000 address-group 1差异：华为要显式选 mode pat/no-pat；思科用 overload 控制是否复用；H3C 在地址池里不写模式，复用与否由 outbound 语句决定。